Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8521ac3d-2da2-4d88-b38b-4b2d742acf7b.roa
File: 8521ac3d-2da2-4d88-b38b-4b2d742acf7b.roa (raw, json)
Hash identifier: HRI7HPFM5i7olA9b7vPcVSXUWclHVAN0RyXjYOHeNrE=
Subject key identifier: C2:33:92:6F:01:5D:DD:A3:15:19:B2:DF:6A:D5:03:9F:17:2F:DB:35
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0571CE2858A5FA71327E837DFA99D6F9F9485750
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8521ac3d-2da2-4d88-b38b-4b2d742acf7b.roa
Signing time: Tue 14 Oct 2025 15:11:18 +0000
ROA not before: Tue 14 Oct 2025 15:11:18 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:71:ce:28:58:a5:fa:71:32:7e:83:7d:fa:99:d6:f9:f9:48:57:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 15:11:18 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=3986a2df1926419feebaa35557e11f6f1ca1081cf6dfc44e8913e4274761a5a3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:e5:2b:10:9d:f2:e4:db:08:32:f4:53:22:
70:d9:ec:3b:b3:a6:36:5a:f3:4d:82:cd:da:49:31:
4c:78:1f:64:16:e9:c0:bf:49:78:e3:52:79:7d:96:
3a:dd:91:1a:43:69:e8:9a:6a:2f:12:72:0a:67:67:
27:39:88:04:59:63:4b:b6:da:4f:cb:49:06:25:0d:
9a:08:f1:a7:6d:e8:fa:21:0b:80:fa:30:c4:43:42:
14:b7:d8:3e:14:43:eb:df:77:f7:ad:60:9d:75:ec:
69:ed:5d:4d:de:f5:9a:e5:1c:23:3b:cd:a7:28:1e:
a8:88:f9:3c:3e:21:d4:81:52:3c:0e:e4:c3:28:3f:
4d:cd:15:d4:67:d5:c1:b7:47:e3:e4:59:49:be:55:
f9:79:03:dc:8c:15:6a:be:a5:be:64:b5:6c:69:85:
4b:49:97:30:47:03:d0:3e:ae:83:1a:64:9e:13:9f:
06:a5:8c:02:c9:08:d7:66:20:38:b3:dc:27:a3:c7:
c7:be:6e:c3:b9:40:13:49:90:b7:c1:18:29:c8:57:
ad:03:a9:9a:73:a5:eb:fe:4f:05:e5:98:26:71:d6:
cf:63:55:ff:60:3a:c6:79:4e:e2:e1:c6:c0:14:ca:
3f:c5:62:2e:09:3b:dd:96:00:68:48:b9:99:1d:e9:
42:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:33:92:6F:01:5D:DD:A3:15:19:B2:DF:6A:D5:03:9F:17:2F:DB:35
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8521ac3d-2da2-4d88-b38b-4b2d742acf7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.209.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:1d:b3:87:59:30:d4:b9:d7:b3:dd:c0:45:72:ca:fe:e2:9b:
bf:8e:3b:46:bc:bc:63:e8:0c:c8:65:4a:81:c5:f5:02:d1:d6:
70:8c:fd:85:6a:b0:bb:d0:e3:ea:d4:55:f2:5d:d5:21:89:95:
9e:b6:c0:55:c9:2c:cd:06:d7:f6:4c:00:0b:86:05:ea:05:85:
6e:d3:9f:45:4f:ca:3d:61:39:4b:a2:8d:87:76:77:d3:1c:a3:
dd:16:a0:3a:b4:e9:6e:57:db:0a:e9:0d:a7:3c:d5:96:cf:fa:
2c:1c:14:a3:35:d9:48:80:f1:23:1b:cf:3d:6a:88:b7:ad:c1:
ff:b3:fa:4e:5d:cd:02:57:00:6d:42:8d:7d:68:24:0b:a2:33:
d1:43:5d:f4:39:e6:c8:65:7a:a4:91:a5:e6:26:5b:1e:94:e1:
4c:48:4a:e0:a0:57:57:d0:f0:0e:bc:67:50:f7:b5:11:f2:ea:
f6:cf:de:96:69:ac:1b:a4:93:b5:80:a9:7f:b0:98:01:b3:cd:
3e:8d:8e:ee:96:15:79:97:25:4d:48:0f:b9:29:22:22:76:58:
0a:c7:8c:77:97:cc:ef:90:8f:cd:01:ff:e1:bb:b2:0b:e6:b4:
3b:9e:64:f9:b6:9f:24:fa:ce:e0:ed:30:b8:88:6d:00:4e:73:
47:e5:79:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:01 2025 by rpki-client